Avi Kivity 3dbe141595 KVM: MMU: Segregate shadow pages with different cr0.wp ...

When cr0.wp=0, we may shadow a gpte having u/s=1 and r/w=0 with an spte
having u/s=0 and r/w=1.  This allows excessive access if the guest sets
cr0.wp=1 and accesses through this spte.

Fix by making cr0.wp part of the base role; we'll have different sptes for
the two cases and the problem disappears.

Signed-off-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>

2010-05-19 11:41:09 +03:00

..

api.txt

KVM: Document KVM_GET_MP_STATE and KVM_SET_MP_STATE

2010-05-17 12:19:30 +03:00

cpuid.txt

KVM: Add cpuid.txt file

2010-05-19 11:41:07 +03:00

mmu.txt

KVM: MMU: Segregate shadow pages with different cr0.wp

2010-05-19 11:41:09 +03:00